在PHP中将表单数据插入MySQL

Question

I have a form in Html like this:

 <!--HTML Form input--> <div class = "login-block"> <form id="form1" style="display: block" method="POST" action="Insert.php"> <!--Input link api--> <b>Link: </b><input type="text" id="link" name="apilink"><br> <br> <!--Chart Type--> <b>Chart Type:</b> <label class="custom-select"> <select id="chartType" name="chartType"> <option value="">Select</option> <option value="pie">Pie Chart</option> <option value="column">Column Chart</option> <option value="bar">Bar Chart</option> </select> </label> <br><br> <!--Button create chart--> <div class ="wrapper"> <button type="button" name="create" onClick="drawChart();">Create</button> <br><br> </div> </form> </div> 

I create a php file to insert what user type in form to MySQL Database, this is my Insert.php:

<!--Insert Form Data to MySQL-->
<?php 
    $con = mysql_connect("localhost","root","123456");
    if (!$con)
    {
        die('Could not connect: ' . mysqli_error());
    }

    mysql_select_db("activiti_report");

    if(isset($_POST['create'])) {
        $sql = "INSERT INTO chartinfo (link, typeChart) VALUES ('$apilink', '$chartType')";

        $result = mysql_query($sql);
    }

?>

But when I run my page, after type some text and choose drop down list, I press Create button and nothing happen.

UPDATE:

Answer 1

You're open to SQL injection. I recommend you to use prepared statement.

<?php
if(isset($_POST['create'])){
    $chartType = $_POST['chartType'];
    $apilink = $_POST['apilink'];
    $conn = new mysqli("localhost", "root", "123456", "activiti_report");
    if ($conn->connect_error) {
        die("Connection failed: " . $conn->connect_error);
    }
    $stmt = $conn->prepare("INSERT INTO chartinfo (link, typeChart) VALUES (?,?)");
    $stmt->bind_param("ss", $apilink, $chartType);
    $stmt->execute();
    $stmt->close();
    $conn->close();
}else{
    echo "Form not sended";
}

Answer 2

It looks like you are firstly not getting the data from the form.

To get the actual data you would need to get them from post like this.

$apilink = $_POST["apilink"];